From cf93a7b364a70b56150cf6ea77492b799ec02a45 Mon Sep 17 00:00:00 2001 From: Daniel Stenberg Date: Fri, 27 May 2016 16:58:43 +0200 Subject: RELEASE-NOTES: 7.49.1 --- RELEASE-NOTES | 24 ++++++++++++++++-------- 1 file changed, 16 insertions(+), 8 deletions(-) diff --git a/RELEASE-NOTES b/RELEASE-NOTES index 7c4653992..ca3142c0b 100644 --- a/RELEASE-NOTES +++ b/RELEASE-NOTES @@ -4,14 +4,11 @@ Curl and libcurl 7.49.1 Command line options: 185 curl_easy_setopt() options: 224 Public functions in libcurl: 61 - Contributors: 1388 - -This release includes the following changes: - - o + Contributors: 1404 This release includes the following bugfixes: + o Windows: prevent DLL hijacking, CVE-2016-4802 [11] o dist: include manpage-scan.pl, nroff-scan.pl and CHECKSRC.md [1] o schannel: fix compile break with MSVC XP toolset [2] o curlbuild.h.dist: check __LP64__ as well to fix MIPS build [3] @@ -23,6 +20,11 @@ This release includes the following bugfixes: o winbuild/Makefile.vc: Fix check on SSL, MBEDTLS, WINSSL exclusivity [7] o curl_multibyte: fix compiler error o openssl: cleanup must free compression methods (memory leak) [8] + o mbedtls: fix includes so snprintf() works [9] + o checksrc.pl: Added variants of strcat() & strncat() to banned function list + o contributors.sh: better grep pattern and show GitHub username [10] + o ssh: fix build for libssh2 before 1.2.6 [12] + o curl_share_setopt.3: Add min ver needed for ssl session lock [13] This release includes the following known bugs: @@ -31,9 +33,10 @@ This release includes the following known bugs: This release would not have looked like this without help, code, reports and advice from friends like these: - Alexander Traud, Daniel Stenberg, Gisle Vanem, Jan Ehrhardt, Marcel Raad, - Michael Kaufmann, Paul Howarth, Ray Satiro, Steve Holme, Tomas Jakobsson, - (10 contributors) + Alexander Traud, Daniel Stenberg, Gisle Vanem, Jan Ehrhardt, + jveazey on github, Marcel Raad, Michael Kaufmann, Michael Wallner, + Moti Avrahami, Paul Howarth, Ray Satiro, Steve Holme, Tomas Jakobsson, + (13 contributors) Thanks! (and sorry if I forgot to mention someone) @@ -47,3 +50,8 @@ References to bug reports and discussions on issues: [6] = https://curl.haxx.se/bug/?i=821 [7] = https://curl.haxx.se/bug/?i=818 [8] = https://curl.haxx.se/bug/?i=817 + [9] = https://curl.haxx.se/mail/lib-2016-05/0196.html + [10] = https://curl.haxx.se/bug/?i=824 + [11] = https://curl.haxx.se/docs/adv_20160527.html + [12] = https://curl.haxx.se/bug/?i=831 + [13] = https://github.com/curl/curl/issues/826 -- cgit v1.2.3